Digressing a little from the central topic -- Yeah, it's actually amazing how hard that message is to get through. And you even see a dichotomy where the HR sid

Digressing a little from the central topic -- Yeah, it's actually amazing how hard that message is to get through. And you even see a dichotomy where the HR side of a company will understand that and will go out of it's way to hire experienced people and retain them, but Product/Project Managers will completely discount them to the point of driving experienced people out of a business when the knowledge and experience says "Build it X way or you're in a world of hurt a year from now. I lived that once and I don't want to live it again." Or, put another way, "Security is not a feature the business needs at this time in this PII-heavy project."